Suricata

The pcap does trigger only on fuzz_decodepcapfile, not on suricata

Here is a pcap reproducer

I had to do mergecap -a -w lolc.pcap lolb.pcap lolb.pcap because fuzzing runs the input twice (to check for leaks)

Minimized reproducer

Gitlab MR

HIGH as it could potentially lead to loss of visibility, and thus policy bypass.

https://github.com/OISF/suricata/security/advisories/GHSA-mf6r-3xp2-v7xg

https://github.com/OISF/suricata/commit/9203656496c4081260817cce018a0d8fd57869b5